Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/323830343a353637343a3a2f33332d3333203d3e20323637393939.roa
File:                     323830343a353637343a3a2f33332d3333203d3e20323637393939.roa (raw, json)
Hash identifier:          xwunV7gtcn41S+psNffbKwqu9oZQucgHpQ3/CVYprFs=
Subject key identifier:   C9:8C:66:D5:88:DE:C0:49:02:25:E0:FB:3F:BC:D2:1E:D7:50:17:B0
Certificate issuer:       /CN=97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32
Certificate serial:       1FD7BD25EA9DF192360E693A0A1207B70D84834A
Authority key identifier: 97:DF:A5:B9:AA:D5:FA:91:41:F4:EC:CE:CB:06:D7:2A:AB:DB:0E:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/323830343a353637343a3a2f33332d3333203d3e20323637393939.roa
Signing time:             Thu 04 Apr 2024 23:08:49 +0000
ROA not before:           Thu 04 Apr 2024 23:03:49 +0000
ROA not after:            Thu 03 Apr 2025 23:08:49 +0000
asID:                     267999
IP address blocks:        2804:5674::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d7:bd:25:ea:9d:f1:92:36:0e:69:3a:0a:12:07:b7:0d:84:83:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32
        Validity
            Not Before: Apr  4 23:03:49 2024 GMT
            Not After : Apr  3 23:08:49 2025 GMT
        Subject: CN=C98C66D588DEC0490225E0FB3FBCD21ED75017B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:12:d1:62:9b:aa:49:95:bb:7c:60:fc:66:74:
                    90:e0:a8:d7:75:66:15:5d:4e:e6:60:8c:12:00:1c:
                    88:22:ee:b6:72:20:2e:70:a7:4e:06:e3:0b:7f:db:
                    84:2f:dc:69:b4:13:96:e7:67:7a:94:c6:1e:2d:51:
                    df:43:de:1e:e2:ca:ab:58:03:2d:a7:3d:23:70:51:
                    09:d8:b8:2e:bd:67:3f:f0:49:03:37:f1:84:a2:8b:
                    6e:80:94:f1:1c:98:38:11:31:ab:ba:01:b3:d6:53:
                    7f:74:74:11:f9:17:b0:e2:52:13:b0:30:e1:0b:98:
                    80:c0:53:b1:fd:c5:f2:a7:76:91:6c:cf:2a:91:27:
                    e1:ff:43:64:cc:02:af:52:63:00:39:3d:6d:72:cf:
                    07:05:75:46:4d:ce:22:07:99:bd:c9:17:59:fd:c1:
                    79:6f:d4:c3:71:72:fe:ad:91:77:ce:f6:42:76:ec:
                    ed:04:bc:fa:a9:62:a1:40:b2:b0:ae:41:b4:ac:8f:
                    31:95:72:db:b8:78:3c:a8:b1:f9:70:74:26:20:5d:
                    44:6e:8d:f6:5e:9b:55:de:5e:b1:a5:4a:6a:6b:66:
                    5d:ab:ea:24:68:01:e4:8d:a4:c8:5c:a3:2c:c8:63:
                    55:cf:5b:4f:fc:3f:9a:aa:6b:14:bf:43:54:30:98:
                    95:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8C:66:D5:88:DE:C0:49:02:25:E0:FB:3F:BC:D2:1E:D7:50:17:B0
            X509v3 Authority Key Identifier:
                keyid:97:DF:A5:B9:AA:D5:FA:91:41:F4:EC:CE:CB:06:D7:2A:AB:DB:0E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97DFA5B9AAD5FA9141F4ECCECB06D72AABDB0E32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/2/323830343a353637343a3a2f33332d3333203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5674::/33

    Signature Algorithm: sha256WithRSAEncryption
         7e:c9:af:f6:7d:fa:35:51:8b:fd:3f:c8:fe:f3:46:e3:96:52:
         64:5b:75:7c:ae:7c:f4:e9:74:13:18:44:05:81:9a:b0:a7:ee:
         0e:1e:bd:25:88:45:bb:9a:fc:4d:c5:ab:46:da:3e:95:d1:7e:
         76:53:99:9a:5e:d6:8c:79:16:14:0b:c3:bc:2d:09:9b:71:12:
         85:9c:7b:5f:c6:de:b2:73:27:01:af:86:53:00:2a:fe:94:6a:
         f4:fc:3f:86:0a:05:71:b4:7e:ee:95:c1:40:e2:f0:96:92:1f:
         05:bb:2b:f4:08:70:0d:16:b2:74:85:c2:94:bb:c5:85:40:d1:
         18:30:94:15:4c:50:fb:12:2a:27:07:94:36:f8:b0:8a:6b:60:
         59:1f:6f:dc:a0:9c:a7:4d:7f:e3:80:80:c6:31:af:25:ec:91:
         04:64:66:7c:a7:85:49:02:63:90:16:e0:1f:76:7d:13:92:9c:
         96:00:32:b3:10:a9:f5:43:0e:a3:62:09:dd:17:66:b5:44:f5:
         b0:e2:54:7a:20:8a:8c:9e:80:d5:63:6f:0c:64:61:7d:93:3f:
         1a:c2:27:13:b4:cf:fc:6e:77:6e:68:51:a4:b7:57:3a:70:6a:
         ad:a9:31:74:22:35:d5:f0:2e:d0:4f:67:46:c2:cc:27:59:18:
         1e:45:b6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----